checkstack showed that the max stack usage was for tpm_seal, at 530bytes. (The rest were 300 or less.) I can certainly throw the hashesand nonce (120 bytes) into a dynamically allocated struct, if youthink it is worth the extra code...